Vulnerability in Palo Alto Networks Cloud Ngfw
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem.
EPSS: 0.007 (72.2th percentile) — read the EPSS interpretation.
Affected products
- Palo Alto Networks Cloud Ngfw — versions All
- Palo Alto Networks Expedition — versions 1
- Palo Alto Networks Panorama — versions All
- Palo Alto Networks Pan-os — versions All
- Palo Alto Networks Prisma Access — versions All
Weakness classification (CWE)
References
- security.paloaltonetworks.com/PAN-SA-2025-0001 (vendor-advisory)